Skip to content

genkit

v1.37.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo LLM Frameworks
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agents ai embedders genkit llm multimodal
+1 more
vector-db

Affected surfaces

auth

Summary

AI summary

Fix credential leak vulnerability, add Gemini image models and gemini-3.1-flash-lite support for google-genai, plus Claude Opus 4.8 updates across js plugins.

Full changelog

What's Changed

  • fix(js/plugins/google-genai): Fix credential leak vulnerability by @ifielker in https://github.com/genkit-ai/genkit/pull/5422
  • feat(js/plugins/vertex): Model Garden Claude Opus 4.8 by @ifielker in https://github.com/genkit-ai/genkit/pull/5429
  • feat(js/plugins/google-genai): Added new Gemini image models by @ifielker in https://github.com/genkit-ai/genkit/pull/5423
  • feat(dev-ui): add ui component metadata by @MichaelDoyle in https://github.com/genkit-ai/genkit/pull/5430
  • fix(js): release/cancel stream readers when consumers stop reading early by @ifielker in https://github.com/genkit-ai/genkit/pull/5435
  • chore(js/plugins/google-genai): Clean up gemini-2.0 models by @ifielker in https://github.com/genkit-ai/genkit/pull/5434
  • feat(js/plugins/google-genai): Support for gemini-3.1-flash-lite by @ifielker in https://github.com/genkit-ai/genkit/pull/5436
  • feat(js): mark interrupt tools as non-restartable and preserve tool metadata by @pavelgj in https://github.com/genkit-ai/genkit/pull/5414
  • feat(js/plugins/anthropic): Claude Opus 4.8 support by @ifielker in https://github.com/genkit-ai/genkit/pull/5500
  • fix(tools): detect pubspec.yaml as a project root marker by @chrisraygill in https://github.com/genkit-ai/genkit/pull/5503
  • feat(js/plugins/vertexai): Model Garden support for Claude Fable 5 by @ifielker in https://github.com/genkit-ai/genkit/pull/5501
  • feat(js/plugins/fastify): add @genkit-ai/fastify plugin (fastifyHandler) by @chrisraygill in https://github.com/genkit-ai/genkit/pull/5477
  • fix(js/plugins): harden streaming in express and fetch handlers by @chrisraygill in https://github.com/genkit-ai/genkit/pull/5481

New Contributors

  • @arthu-rguo made their first contribution in https://github.com/genkit-ai/genkit/pull/5483
  • @naqerl made their first contribution in https://github.com/genkit-ai/genkit/pull/5339
  • @adesinah made their first contribution in https://github.com/genkit-ai/genkit/pull/5499

Full Changelog: https://github.com/genkit-ai/genkit/compare/v1.36.0...v1.37.0

Security Fixes

  • fix(js/plugins/google-genai): Fix credential leak vulnerability
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track genkit

Get notified when new releases ship.

Sign up free

About genkit

Open-source framework for building AI-powered apps in JavaScript, Go, and Python, built and used in production by Google

All releases →

Related context

Beta — feedback welcome: [email protected]